X-Road v7.2.0 Release Notes
Release Info
Version number | 7.2.0 |
|---|---|
Release date | 13.12.2022 |
Supported versions |
|
Supported platforms | Central Server
Configuration Proxy
Security Server
|
Official documentation | |
Source code | |
Software license |
Changes in This Release
Summary
Support for Ubuntu 22.04 LTS.
Central Server, Security Server and Configuration Proxy can be migrated from Ubuntu 20.04 LTS to the latest Ubuntu 22.04 LTS version.
Ubuntu 22.04 LTS support includes installation packages, and instructions for fresh install and migration from Ubuntu 20.
Remove support for Ubuntu 18.04 LTS.
Ubuntu 18.04 versions of previous releases (v7.0.4, v7.1.1) are supported until the end of the release's official support period.
Experimental support for ARM64 processor architecture.
Publish a snapshot version of X-Road ARM64 packages that can be used for testing purposes.
Support for transferring data to object storages, e.g., AWS S3.
Minor enhancements and bug fixes based on user feedback.
Completed Issues
Issue ID | Type | Summary |
|---|---|---|
Improvement | Add content-length HTTP header calculated based on the actual content on the producer side Security Server. This makes it possible for the receiving side information system to check the content length using the header and allows for uploading data to object storages, e.g., AWS S3. Before the change, the producer side Security Server added the " | |
Improvement | Update the operational monitoring Security Server add-on to store the "X-Road-Represented-Party" HTTP header from REST message exchange. Before the fix, the header was stored from SOAP message exchange only. The format of the "X-Road-Represented-Party" HTTP header value is defined in the Third Party Representation Extension for the X-Road Message Protocol document. | |
Fix | Fix an issue on the Security Server that caused re-importing a configuration anchor to fail with the error “Configuration anchor import failed: invalid anchor file”. | |
New | Remove support for Ubuntu 18.04 LTS. Ubuntu 18.04 LTS versions of previous releases (v7.0.4, v7.1.1) are supported until the end of the release's official support period. | |
New | Add support for Ubuntu 22.04 LTS in Security Server packages. | |
New | Add support for Ubuntu 22.04 LTS in Central Server packages. | |
New | Add support for Ubuntu 22.04 LTS in Configuration Proxy packages. | |
New | Document the Central Server upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here: | |
New | Document the Configuration Proxy upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here: | |
New | Document the Security Server upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here: | |
New | Document the Security Server cluster upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here: | |
Improvement | Documentation for setting up a Security Server cluster is updated for Ubuntu 22.04 LTS. | |
Fix | Fix an issue where removing access from one version of a SOAP service would remove access to other versions of the service as well. | |
Fix | Fix issues with the X-Road Security Server Sidecar that caused database migrations to fail. Improve the documentation to make the version upgrade steps clearer. | |
Fix | Fix an issue where users could not log into the token on a secondary node of a Security Server cluster due to it being read-only. In X-Road versions before 7.2.0 (<7.2.0), the secondary node UI user had to be a member of only one UI privilege group: "xroad-securityserver-observer". Instead, starting from version 7.2.0 (>=7.2.0), the secondary node UI user has to be a member of two UI privilege groups: "xroad-securityserver-observer" and "xroad-security-officer". After upgrading to version 7.2.0, the secondary node UI user must be added to the "xroad-security-officer" privilege group manually by the Security Server administrator. More information about managing the Security Server UI users is available here. | |
Fix | Fix an issue with downloading the verification package using the Security Server’s "/verificationconf" interface. The verification package is required by the "asicverifier.jar" utility that's used for message log archive verfication. | |
Improvement | Add documentation about the Third Party Representation Extension for the X-Road Message Protocol in the X-Road source code repository. | |
Fix | Fix an issue with adding sign keys to a HSM in a clustered Security Server setup. The issue required the secondary Security Server nodes to be restarted before they were able to see the new key. After the fix, the secondary Security Server nodes are able to see the new key without a restart. | |
Improvement | Estonian national settings: Update default authentication and signing key length to 3072 bits (earlier 2048 bits). | |
Fix | Marked the old "SkEsteIdCertificateProfileInfoProvider" as deprecated since the related profile is no longer used. Please contact NIIS (x-road@niis.org) in case you are still using this profile. Unless NIIS receives further feedback on this deprecation, the profile will be completely removed in a future version. | |
Fix | Fix an issue with automatic backup generation that caused the automatic backup generation not to work in the X-Road Security Server Sidecar image. | |
Improvement | Increase the default maximum memory parameter (XROAD_MESSAGELOG_ARCHIVER_PARAMS) for the messagelog addon from 100mb to 200mb. |
Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).
New/Updated Dependencies
Dependency | Old Version | New Version | Notes |
|---|---|---|---|
rake | 13.0.3 | 13.0.6 |
|
tzinfo | 0.3.60 | 0.3.61 |
|
addressable | 2.4.0 | 2.8.0 |
|
concurrent-ruby | 1.1.8 | 1.1.10 |
|
thor | 1.1.0 | 1.2.1 |
|
apache-mime4j-core | 0.8.6 | 0.8.7 |
|
akka | 2.13:2.6.16 | 2.13:2.6.20 |
|
jackson | 2.13.3 | 2.13.4.20221013 |
|
spring-boot | 2.6.8 | 2.7.5 |
|
spring-cloud | 2021.0.1 | 2021.0.4 |
|
Contributors
The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release. The full list of contributors of different X-Road® versions is available here.
Other Notes
Package Repositories
Repository | URL |
|---|---|
Bionic |
|
Focal |
|
RPM / RHEL7 |
|
RPM / RHEL8 |
|
Docker |
Repository Sign Key Details
Download URL | |
|---|---|
Hash | 935CC5E7FA5397B171749F80D6E3973B |
Fingerprint | A01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B |
3rd party key server |
Packages
Package | SHA256 checksum |
|---|---|
xroad-addon-hwtokens_7.2.0-0.ubuntu20.04_amd64.deb | 23a8de014ba6c9730c5510b61588dbe128e4b5b823a02d033db1e2a556a6c0ab |
xroad-addon-messagelog_7.2.0-0.ubuntu20.04_all.deb | 7aeb98f32cf57ca38692317500c784e9534bfdeaec62e56fd9150213dd2e95d9 |
xroad-addon-metaservices_7.2.0-0.ubuntu20.04_all.deb | e599969782af6cd81894f7a98431d824ee03f2a01326f98668bb5970ae0d36fe |
xroad-addon-proxymonitor_7.2.0-0.ubuntu20.04_all.deb | cdcb5c391bb8fb58461d6647db87e52f7ecf63756d53eff3f2eda7a28ed50cce |
xroad-addon-opmonitoring_7.2.0-0.ubuntu20.04_all.deb | 346a47c7fea0774c603b136ab4e75052ab75a821f9621c68bdcbbe85bcbe6260 |
xroad-addon-wsdlvalidator_7.2.0-0.ubuntu20.04_all.deb | ff01f61c419ec8dcc745eade8d6e50eee2485474ba65f4dddbd7e6d9207bbfd6 |
xroad-autologin_7.2.0-0.ubuntu20.04_all.deb | 859f3a5913f9eb64188212634b6913dabeafae28dbfae4767c71a3d585ebb854 |
xroad-base_7.2.0-0.ubuntu20.04_amd64.deb | 00f9040ff1e5fb87fbd8425347d0fdbe100fc02590ff085394b408827e8dfa60 |
xroad-center_7.2.0-0.ubuntu20.04_all.deb | 3a888a3028cc5dae663e93de52b6f3f0ba7bf26f4c657d4581ced7601dc7304b |
xroad-centralserver_7.2.0-0.ubuntu20.04_all.deb | e5bde1b42da06e74760da2bb7b3107eb2f26bceefc235d773f89ce3a57c27e9c |
xroad-centralserver-monitoring_7.2.0-0.ubuntu20.04_all.deb | 13da7ffaa1b73c47252d27147c7ad6b622e577f1b9f79d8ea31f682a0693e609 |
xroad-confclient_7.2.0-0.ubuntu20.04_amd64.deb | bd4dc7e7512bd5a23f91c65dca5e7baa8cc1c950ac48fe7449d042afb953014f |
xroad-confproxy_7.2.0-0.ubuntu20.04_all.deb | cbc4ff251489d8f3b1feb28e940c7e83fde9610dd16a5cbe05bb2ac3626916ea |
xroad-database-local_7.2.0-0.ubuntu20.04_all.deb | 063389b1d4aae4354302628c45a7c9a8e70136b80e86f074b51a3d71d2c0ca4b |
xroad-database-remote_7.2.0-0.ubuntu20.04_all.deb | 06193097880a55e819a48f7366775050f1c428a952a995951b6ba7be71cead75 |
xroad-jetty9_7.2.0-0.ubuntu20.04_all.deb | d221bcefec3284f1d13e834029b2090795a1d3394b68863c78e60106a82aadc6 |
xroad-monitor_7.2.0-0.ubuntu20.04_all.deb | c6a7d940f283653f404fb2c81f6381c877be8b3d66249836b15ff4f093f18db9 |
xroad-nginx_7.2.0-0.ubuntu20.04_amd64.deb | a6c899dda55adbc42782e9d1c66afa3ff952b5be0bf67221820a964f2dbfad56 |
xroad-opmonitor_7.2.0-0.ubuntu20.04_all.deb | 0b3a68139b6b2d4bd0252b70e8f1dd93117c1b1e1d70828ebe0bbe07cf2c9504 |
xroad-proxy_7.2.0-0.ubuntu20.04_all.deb | 4776b2c0d48da151b6239f15dca47b9c9869dd6f829d7b13b17290254b7e00fd |
xroad-proxy-ui-api_7.2.0-0.ubuntu20.04_all.deb | bb31adde95c199db6b9a1b2e7beca0e2e897df45c8600756aa68ee0b26a3ee4b |
xroad-securityserver_7.2.0-0.ubuntu20.04_all.deb | 3c75436c7e1982dc43e033d3c02c886fefcbc2cde61d724e94dc8360bad70db9 |
xroad-securityserver-ee_7.2.0-0.ubuntu20.04_all.deb | aef9268f10c22f043859cc1d0e44d1f58c3934d14628179e075914d90ffb6afb |
xroad-securityserver-fi_7.2.0-0.ubuntu20.04_all.deb | af70fb71450d7aeff276122515a32c11c8567217fe9101cc9df6318a647d71dc |
xroad-securityserver-fo_7.2.0-0.ubuntu20.04_all.deb | d2a967dae8a01732ebbb81a63ea22def2aa59d21b468c6b6b21b3d40587f0fee |
xroad-securityserver-is_7.2.0-0.ubuntu20.04_all.deb | e163f06ece8b7c34d4e6e37982d238d87cad09ef2611c63add56cbab14ee673d |
xroad-signer_7.2.0-0.ubuntu20.04_amd64.deb | b796f00cdb893d7d74c524e79a676b849081b288722c0e9ea58e5c8c5d3d3190 |
Jammy
Package | SHA256 checksum |
|---|---|
xroad-addon-hwtokens_7.2.0-0.ubuntu22.04_amd64.deb | 6be3ab272e73350a60ffac0accbe3ef388df0e2a5a59475d4ae144ed17600f69 |
xroad-addon-messagelog_7.2.0-0.ubuntu22.04_all.deb | 72dbc68c4bd784e5087667d51892e5ab5bfbbc38f475151237b87cb014eceace |
xroad-addon-metaservices_7.2.0-0.ubuntu22.04_all.deb | a4e41dd42f9f73530074464b17ead9483962ebd0cc8d021ed1ede2d5b3c4264a |
xroad-addon-opmonitoring_7.2.0-0.ubuntu22.04_all.deb | c0418677442bb8f7e2b06ebec1f5ac072cd88c7850730e078f13691e11f60653 |
xroad-addon-proxymonitor_7.2.0-0.ubuntu22.04_all.deb | ed55580f4e5a73fcf61d71449a74fd77164bfc54fccefec434844c00a98e485a |
xroad-addon-wsdlvalidator_7.2.0-0.ubuntu22.04_all.deb | e8a1384a796193ce012e6fd70d0feece13dc4ac540c8f3c1b53686e5a3f00b45 |
xroad-autologin_7.2.0-0.ubuntu22.04_all.deb | 21a1ea98adc37198a9f0fb6299962453e94e8f1223d041e2e6d7fd39aab9d10c |
xroad-base_7.2.0-0.ubuntu22.04_amd64.deb | 2595d335487932a0dd2fc5d5247ec16aed0b49f5ce10961e688425de54d8fbfe |
xroad-center_7.2.0-0.ubuntu22.04_all.deb | 049421351fc4b31724a507b45f1a29368ab909e7a14e8320ff8695f1e2c477ad |
xroad-centralserver_7.2.0-0.ubuntu22.04_all.deb | 66a843e0e1db285b09a03f72786d26fa3021bfc1a73068e8a6db8b683827d8f0 |
xroad-centralserver-monitoring_7.2.0-0.ubuntu22.04_all.deb | 7b5fd90dbd0659d15e2347f3920faad327d8673d7848ec8a030160d6366e32e9 |
xroad-confclient_7.2.0-0.ubuntu22.04_amd64.deb |